Re: [GENERAL] select any table

2008-03-26 Thread Sam Mason
On Wed, Mar 26, 2008 at 07:27:49AM -0500, Roberts, Jon wrote: > I think the bigger foot gun would be a lazy dba granting auditors > "superuser" in place of a read-only account. At least that would stop users revoking audit access to the tables! :) Any scheme that purports to allow this (i.e. dis

Re: [GENERAL] select any table

2008-03-26 Thread Roberts, Jon
> -Original Message- > From: [EMAIL PROTECTED] [mailto:pgsql-general- > [EMAIL PROTECTED] On Behalf Of Sam Mason > Sent: Wednesday, March 26, 2008 7:14 AM > To: pgsql-general@postgresql.org > Subject: Re: [GENERAL] select any table > > On Tue, Mar 25, 2008 at 0

Re: [GENERAL] select any table

2008-03-26 Thread Sam Mason
On Tue, Mar 25, 2008 at 05:37:00PM -0400, Malinka Rellikwodahs wrote: > On Tue, Mar 25, 2008 at 2:54 PM, Joshua D. Drake wrote: > > On Tue, 25 Mar 2008 13:37:37 -0500 Jon Roberts wrote: > > > It would be a nice enhancement to have a "select any table" privilege > > > or at least "grant insert/updat

Re: [GENERAL] select any table

2008-03-26 Thread Alan Hodgson
On Tuesday 25 March 2008, "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > We are adding tables and schemas all of the time and we need to grant > auditors read-only access to the database. Make a "grant select on table to auditors;" a standard part of your table creation process. -- Alan -- Sent v

Re: [GENERAL] select any table

2008-03-25 Thread Malinka Rellikwodahs
I'm just curious how would having the ability to grant privileges to a schema be a foot gun? On Tue, Mar 25, 2008 at 2:54 PM, Joshua D. Drake <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Tue, 25 Mar 2008 13:37:37 -0500 > "Roberts, Jon" <[EMAIL PROTECTED]> wr

Re: [GENERAL] select any table

2008-03-25 Thread Raymond O'Donnell
On 25/03/2008 14:54, Roberts, Jon wrote: I have some users that need "select any table" but they should not be superusers. How can this be done? I need a "grant select on to ". PgAdmin (www.pgadmin.org) has a handy "Grant Wizard" which will do this for you in one go. Ray. ---

Re: [GENERAL] select any table

2008-03-25 Thread Joshua D. Drake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 25 Mar 2008 13:37:37 -0500 "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > > O.k. :) but that doesn't change my response. You can't do it with a > > single command. You can script it. > > > > > > It would be a nice enhancement to have a "select

Re: [GENERAL] select any table

2008-03-25 Thread Roberts, Jon
> > > On Tue, 25 Mar 2008 09:54:20 -0500 > > > "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > > > > > > > I have some users that need "select any table" but they should not > > be > > > > superusers. How can this be done? > > > > > > > > I need a "grant select on to ". > > > > > > You can't do it wi

Re: [GENERAL] select any table

2008-03-25 Thread Joshua D. Drake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 25 Mar 2008 10:16:19 -0500 "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > > On Tue, 25 Mar 2008 09:54:20 -0500 > > "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > > > > > I have some users that need "select any table" but they should not > be > > >

Re: [GENERAL] select any table

2008-03-25 Thread Roberts, Jon
> On Tue, 25 Mar 2008 09:54:20 -0500 > "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > > > I have some users that need "select any table" but they should not be > > superusers. How can this be done? > > > > I need a "grant select on to ". > > You can't do it with a single command. It is easy enough

Re: [GENERAL] select any table

2008-03-25 Thread Joshua D. Drake
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 25 Mar 2008 09:54:20 -0500 "Roberts, Jon" <[EMAIL PROTECTED]> wrote: > I have some users that need "select any table" but they should not be > superusers. How can this be done? > > I need a "grant select on to ". You can't do it with a s

Re: [GENERAL] select any table

2008-03-25 Thread Craig Ringer
Roberts, Jon wrote: I need a "grant select on to ". This is a FAQ, though it doesn't actually seem to be in the PostgreSQL FAQ. A Google search, either of the mailing list archives or of the web in general, for: postgresql grant all tables should prove informative. http://www.googl

[GENERAL] select any table

2008-03-25 Thread Roberts, Jon
I have some users that need "select any table" but they should not be superusers. How can this be done? I need a "grant select on to ". Jon -- Sent via pgsql-general mailing list (pgsql-general@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-